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ABSTRACT 



Digital coupons are selectively transmitted in a communi- 
cation network to subscriber terminals for promotional pur- 
poses. Subscribers automatically receive coupon credits 
when they meet the preconditions of the digital coupons. 
Free or reduced price pay-per-view (PPV) programming in 
particular may be provided when a subscriber purchases a 
given number of PPV programs at a regular price. The 
terminals maintain a running balance of available coupon 
credits and inform the subscriber via a user interface of the 
available balance. Subscribers can be rewarded for viewing 
commercial messages by awarding coupons which can be 
immediately redeemed for PPV programs. With an optional 
report back capability, terminal usage pattern data can be 
retrieved and analyzed by program service providers to 
determine the effectiveness of the promotions and to gather 
additional demographic and individual data. The integrity of 
the scheme is assured with encryption techniques. 

51 Claims, 7 Drawing Sheets 
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YOU ARE NOT SUBSCRIBED TO THE PROGRAM. 

HOW DO YOU WISH TO VIEW THE MOVIE? 

YOUR OPTIONS ARE: 

a)lMPULSE PAY-PER-VIEW 

-THE COST IS $3.50 FOR THE MOVIE. 
-YOU HAVE $27.50 CREDIT. 



b)C0UP0NS 



-THE COST IS 7 TV COUPONS. 
-YOU HAVE 13 TV COUPONS. 



a)lMPULSE PAY-PER-VIEW WITH DISCOUNT 

-THE COST IS $1.50 WITH 4 TV COUPONS. 
-YOU HAVE $27.50 CREDIT AND 
13 TV COUPONS. 
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DIGITAL COUPONS FOR PAY TELEVISIONS so-called Near Video On Demand (NVOD). Also programs 

may be delivered essentially instantaneously with Video On 

BACKGROUND OF THE INVENTION Demand (VOD). 

t, . . , . . . - „ . In VOD system systems, the program can be delivered on 

The present invention relates to communications net- , _. A 3 .„ J . ' F . , , ., 

, 1 , L1 . . . , „. t , . . j 5 demand to a specific subscriber when that subscriber com- 

works such as cable television, satellite television and com- municates a b £ si { t0 a videQ scrvcr located at a cable 

puter networks over which services are available for a fee. television [ cm h headend> Tne b si al may be 

In particular, an apparatus and method are presented for commun i ca ted, for example, through an available upstream 

allowing users of services such as pay television to obtain channel m a cable television net work, or via a telephone line, 

credits when viewing particular programs. The invention Various marketing techniques have been used to encour- 

enables service providers to transmit credit information in age subscr i bers to purchase pay-per-view programs. PPV 

the form of "digital coupons" to individual subscriber ter- usua[ly are more pro fitable for the service provider than 

minals to promote particular programs and reward viewer subscription services. These marketing techniques include 

loyalty. providing the subscriber with a credit on his monthly 

Cable and satellite television networks where video ser- 35 statement when the subscriber purchases a predetermined 

vices are available for a fee are well known. Also well 35 number of PPV programs, or spends a predetermined 

known are computer network services such as CompuServe, amount of money on PPV programs. Or, the subscriber may 

Prod igy, America Online, Knight-Ridder Information be mailed a paper coupon which the subscriber can later mail 

Service, and others where databases, banking and shopping back to the network billing department to obtain a discount 

services can be accessed and e-mail and the like can be after the subscnber has met the preconditions for redeeming 

communicated, all for a fee. In the past, some networks have 20 th f cou P on - For e * am P le > th * W« cou P on f m ^ e , ntitle the 

provided services on a free trial basis. For example, during subscriber credlt of one-half the price of a PPV program 

r *i-ji.-r i . when one PPV program is purchased at the regular price, 

promotional periods lasting for one or two days, premium „ „ . « . . . , «• . 

• „ ~L m „ i/a _ „ . . „ i While such marketing techniques can be effective, some 

programming services such as movie or sports channels , , * ■ • 

Tjl' jl u-l t_ ii iju * subscribers may become accustomed to receiving paper 

could be viewed by subscribers who normally would have to „ r . v . . *ui . 7 * 

. , J . T 25 coupons and other discounts on their monthly statements 

pay an additional charge to receive such programming. In ^ then ^ { ^ when such 

most cases, this is done by placing the entire service into afe aQ{ offefed In Qther WOfdSj they wi „ Qnly buy if lhey 

some sort of promotional scrambling mode where the pro- a ^upon. It would be desirable to reward the subscribers 

grams are either not scrambled, i.e. m-the-clear, or use fixed after they have met some predetermined conditions, 

keys which are known to all subscriber terminals. For 3Q Additionally, it is not easy to selectively target groups of 

example, in a broadcast environment, service providers do subscribers or individual subscribers, without making the 

not know which existing customer or potential new cus- entire service free, or to monitor the effectiveness of such 

tomer is attempting to access a particular service. Even if promotions. Moreover, the effectiveness of conventional 

feedback could be obtained, for example, using a telephone promotions may be reduced because the realization of the 

line or some upstream path, there would be too many ^ discount by the subscriber is delayed, typically for a number 

transactions of customers tuning in and out of services for of weeks due to delays in the billing cycle. Furthermore, 

the service provider to usefully analyze. paper coupons are difficult to organize and handle and are 

Consequently, the service must usually be placed in a easily lost, 

scrambling mode which allows free accessed by everyone, Accordingly, it would be desirable to provide a method 

including potential new customers and even existing 40 and apparatus for aUowing selective targeting of promotions 

customers, or at least a large defined group. Moreover, an of programming services to particular subscribers or groups 

extended period of free service time is usually needed to of subscribers without placmg services in free mode or 

rp «- i t - .l j*fp ■ ♦ using paper coupons. The system should allow subscribers 

effectively promote services since the different programs t & r r - j-. u j . * ^ ■ 

. . . * . . . . iL c -n to receive an immediate credit when a predetermined view- 

which are made available during the free preview will erQ faas beeQ ^ ^ tem F should reward sub . 

appeal to different interest, demographic, and age groups of 45 { { ^ encourage subscribers to purchase addi- 

viewers. For example, some viewers may prefer to see tioQal programming ^ such aS PPV programs and/or 

action movies while others prefer to see comedies. Thus, it additional levels of service, such as premium programming 

is necessary to provide a wide variety of free programming services. 

over an extended period of time to effectively encourage The system should alsQ organize the credits in a way t0 

viewers to subscribe to the premium programming services 50 allow tne subscriber to take a quick inventory, and should 

for an additional monthly charge. Morm me subscriber when a service is available through the 

During the free preview period, renewal and new sub- promotion. The system should allow flexibility as to how the 

scriptions rates may be reduced to further motivate the credits may be used, for example, in regard to the variety of 

customer since the customer may otherwise wait until after shows, times, and dates the programming may be accessed, 

the free preview period is over to order new services which 55 Furthermore, it would be desirable to provide a system for 

may, in turn, stress the call handling capability of the service monitoring the success of such promotions, gain feedback 

provider's subscription center. on subscriber viewing habits, and determine the viewership 

Additionally, various programs may be offered on an (e.g., audience size) of particular programs. The system 

individual or a-la-carte pay-per-view (PPV) basis, where the should employ cryptographic techniques to thwart unautho- 

subscriber pays a fee to view a single program. The customer 60 rized persons (e.g., pirates) who attempt to tamper with the 

may either call ahead to the subscription center to have a system for illicit gain. 

specific authorization or entitlement for a single program ^ e preS ent invention provides a system having the above 

sent to the customer's terminal, or the customer can arrange and other advantages, 
to have a certain amount of monetary credit downloaded into 

the customer's terminal. With the selection of PPV program, 65 SUMMARY OF THE INVENTION 

the pre-stored credit amount in the terminal is reduced. Such In accordance with the present invention, an apparatus 

PPV may be offered at fixed times or staggered times with and method are presented for allowing users of services such 
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as pay television to obtain credits when viewing particular 
programs. The invention enables program service providers 
to transmit credit information in the form of "digital cou- 
pons" to individual subscriber terminals to promote particu- 
lar programs and reward viewer loyalty. 

A communication system in accordance with the present 
invention includes a controller for transmitting program 
services to a plurality of subscriber terminals via a commu- 
nication channel. The program service may include televi- 
sion programs which are broadcast or continuously trans- 
mitted on a predetermined schedule, pay-per-view programs 
which require specific user selection and either a local 
transacted or remotely transacted purchase, Near Video-On- 
Demand which is pay-per-view offered at staggered broad- 
cast times, and Video-On-Demand services, which are trans- 
mitted only in response to a user request, or other electronic 
information such as computer software. 

The communication channel may include a cable plant 
and/or satellite link, for example. The program services can 
be selectively recovered by the subscriber terminals. For 
example, a subscriber may select a particular program to 
view by tuning in the corresponding channel using an 
on-screen interface, e.g. Electronic Program Guide (EPG), 
and a remote control unit, or by transmitting a buy order for 
either PPV or Video-On-Demand programming. 

The controller can deliver digital coupon information to 
the terminals along with program service data using any 
available technique, such as frequency or time multiplexing. 
The digital coupon information allows the terminals to 
obtain credits when recovering particular programs as 
defined by preconditions of the digital coupon information. 
For example, the subscriber may receive a credit for one free 
PPV program when the precondition of purchasing five PPV 
programs at regular prices has been met. The terminal 
automatically tracks the balance of coupon credits as cou- 
pons are awarded and redeemed. The credits are usable in 
obtaining program services at a reduced charge (e.g., at a 
discount or free). 

Each terminal includes a processor which monitors a 
usage pattern (e.g., viewing history) of the terminal to 
determine if the preconditions of the digital coupon infor- 
mation have been satisfied. For example, the usage pattern 
may indicate which programs have been recovered by the 
terminal within the last month, or some other period, or the 
length of time that a particular program, or program service 
(e.g., channel) was viewed. The terminal may simply grant 
coupons based on the purchase of a PPV program, or based 
on the amount of time spent viewing an infomercial. The 
credits are thus awarded when there is a correlation between 
the usage pattern and the preconditions of the digital coupon 
information. 

A user interface such as a graphical user interface (e.g., 
on-screen display) may be provided to allow the subscriber 
to selectively redeem the credits. For example, the user may 
have a variety of options from which to choose, where a cash 
balance and/or a coupon balance are redeemed in full or in 
part. The user interface can also be used to obtain a confir- 
mation of user involvement. For example, to verify that the 
subscriber is still viewing a program, he may be periodically 
required to provide some sort of control input as the program 
is displayed. 

When the program services include individual programs 
which can be individually recovered by the terminals, such 
as with a PPV scheme, the coupon credits are awarded when 
the usage pattern indicates that a terminal has recovered a 
particular number of such individual programs, or a partial- 
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lar amount of charges. This allows a coupon credit to be 
awarded whenever a PPV program has been accessed. One 
or more coupons may need to be redeemed in order to access 
a program. 

5 To allow program service providers and advertisers to 
obtain and analyze the terminal usage data, a usage pattern 
accounting center which is associated with a network con- 
troller may be provided. The usage pattern accounting center 
can receive usage pattern data from the terminals via a 

10 communication link, such as an upstream path in the channel 
over which the program services are transmitted, or a 
telephone network. This is especially useful for determining 
the viewership of commercials or infomercials wherein the 
cost of running the ad in a program is oftentimes a function 

15 of the estimated viewing audience. 

Moreover, the network controller can control the delivery 
of the digital coupon information to the terminals based on 
the received usage pattern data. In this case, the network 
controller can deliver the digital coupons directly to the 

20 terminal in a similar fashion as with other entitlements such 
as subscription entitlements, PPV entitlements, and credit 
information. For example, subscribers who demonstrate a 
preference for sports programs can receive digital coupon 
information which provides discounts for future special 

25 sports events. 

The controller can thus deliver different digital coupon 
information to the different subscriber terminals based on 
the usage pattern data or other demographic or individual 

3[) data which has been compiled by other means. The digital 
coupon information can provide different preconditions for 
obtaining the same credits, or the same preconditions for 
obtaining different credits. For example, it is possible to 
reward favored subscribers such as those who purchase 

35 relatively more programming by providing the favored 
subscribers with more coupons than other, less favored, 
subscribers when the same viewing preconditions are met. 

Various cryptographic techniques may also be employed 
to prevent unauthorized access to the digital coupons. 

40 A corresponding subscriber terminal and method are also 
presented. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram of a communication system in 
accordance with the present invention. 

FIG. 2 is a block diagram of a subscriber terminal in 
accordance with the present invention. 

FIG. 3 is a block diagram illustrating a decryption hier- 
50 archy for use in accordance with the present invention. 

FIG. 4 is an on-screen display for a user interface in 
accordance with the present invention. 

FIG. 5 is another on-screen display for a user interface in 
accordance with the present invention. 
55 FIG. 6 is yet another on-screen display for a user interface 
in accordance with the present invention. 

FIG. 7 is a flowchart illustrating a method for providing 
digital coupons in accordance with the present invention. 

60 DETAILED DESCRIPTION OF THE 

INVENTION 

A method and apparatus are presented for allowing users 
of program services such as pay television to obtain credits 
65 when viewing particular programs. r ilie invention enables 
program service providers to transmit credit information in 
the form of "digital coupons" to individual subscriber ter- 
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minals to promote particular programs and reward viewer This has the advantage of requiring no direct involvement by 

loyalty. The digital coupons may be generated locally in the the service provider. This is also suitable for broadcast 

terminals based on criteria sent by the service providers, or environments where the return path either does not exist, is 

transmitted directly as an entitlement by the service pro- slow, or not set-up for interactive transactions. 

y id cr 5 Alternatively, the digital coupon information may allow 

FIG. 1 is a block diagram of a communication system in the terminals to access premium program services at a 

accordance with the present invention. The system includes reduced charge, or at no charge, or allow the terminals to 

a transmitting end, shown generally at 110, a channel 120, access other information, such as a software program, a 

and a receiving end, shown generally at 130. The transmit- computer game, a book in electronic form, a musical 

ting end 110 includes a central controller 130 which com- 10 composition, an on-screen television program guide, movie 

municates with a PPV order processing function 115, a or restaurant reviews, or other promotional, informational or 

terminal usage pattern data accounting function 125, an educational material. For example, the digital coupon infor- 

encryptor/multiplexer/modulator 150, a digital coupon mation may allow a terminal to access a premium movie 

information function 135, a program service data function channel for two days with each PPV purchase, or to down- 

140, and a control data function 145. 15 load one computer video game, or to gain one hour of free 

The receiving end 130 includes a number of terminals connect time to a computer database, 

including terminal 1 (160) through terminal N (170), which The term "program service" is thus used herein to encom- 

receive the digital coupon information, program service pass television, multimedia, and other audio and/or video 

data, and control data via a hub 124 and path 122. Each signals as well as computer software or virtually any other 

terminal has an associated display such as a television for 20 information that can be accessed by, and/or communicated 

displaying the program service data. For example, "terminal to, the terminals via the channel 120. The term "credit" is 

N" 170 has an associated display 180. In the example shown, used herein to indicate that the terminals are provided with 

the terminals 160, . . . , 170 are able to communicate with a benefit such as a reduced or waived charge when accessing 

the PPV order processing function 115 and usage pattern and/or obtaining program services via the channel, or for 

data accounting function 125 via the channel 120. 25 obtaining merchandise via the channel which is delivered to 

For example, in a cable television network, such upstream the subscriber by other means (e.g., by mail), 

communication may be provided on a channel (e.g., RF The terminals 160, . . . , 170 do not realize the credit 

spectrum) which is separate from the channels over which which is offered with the digital coupon information until the 

the program service data is communicated. A frequency- 3Q terminals satisfy certain preconditions. Each terminal 

division multiplexing scheme may be used to achieve this includes means for monitoring various factors which define 

goal. Alternately, a time-division multiplexing scheme may the terminal's usage pattern data over a defined time period, 

be used, or the terminals 160, . . . , 170 may communicate including, for example, the number of PPV programs 

with the PPV order processing function 115 and usage purchased, the amount of PPV charges incurred, whether, 

pattern data accounting function 125 via a separate commu- 35 and for what duration, the terminal has been tuned to a 

nication link such as a telephone network. Moreover, as particular program or program service, whether the terminal 

discussed in greater detail below, the present invention can has recently upgraded to one or more premium program 

be implemented without the PPV order processing function services, and whether a promotional period is in effect. The 

115 and/or usage pattern data accounting function 125 . promotional period may apply to individual terminals, such 

The channel 120 may comprise coaxial cable, optical 40 as those of new subscribers, to selected groups of terminals, 

fiber, and/or a wireless link such as a satellite or RF or to all terminals. 

broadcast link. The transmitting end 110 of the system may Accordingly, monitoring means in the terminals monitor 

be a cable television system headend, a satellite uplink the above factors to determine whether the usage pattern of 

center, or an RF broadcast center, for example. the terminal corresponds with the preconditions of the 

The digital coupon information function 135 comprises a 45 digital coupon information. Optionally, in a "report-back" 

memory for storing digital coupon information in accor- function, the usage pattern data is periodically transmitted 

dance with the present invention. The digital coupon infor- from the terminals to the usage pattern data accounting 

mation is communicated to the terminals 160, . . . , 170 at function 125, for example, via the hub 124 and channel 120, 

the receiving end 130 of the system. Furthermore, when the or, alternatively, via a telephone network. For example, the 

terminals 160, . . . , 170 are addressable, the digital coupon 50 usage data may be transmitted daily, weekly, or monthly, 

information may be targeted to individual terminals and/or Such usage pattern data provides valuable information for 

to groups of terminals, for example, according to demo- program service providers and advertisers which can be used 

graphic data. Alternatively, the digital coupon information to better target individual subscribers and groups of sub- 

may be transmitted via a path which is separate from that of scribers with products and services with which they are 

the program services, 55 likely to be interested. Moreover, the usage pattern data 

The digital coupon information provides credits which the allows the interested parties (e.g., promoters and advertisers) 

terminals can use for a number of purposes. For example, the to determine the effectiveness of various promotions. For 

digital coupon information may provide a discount when the example, when the digital coupon information provides a 

terminals order one or more PPV programs through the PPV one-half price PPV program to subscribers who infrequently 

order processing function 115. As an example, if a terminal 60 order PPV, the success rate of the program can be deter- 

orders five PPV programs within the current billing cycle, mined from the usage pattern data at the function 125. 

the digital coupon credit may allow the terminal to order a As another example, when the digital coupon information 

sixth PPV program at no charge. Or, for terminals that order provides two free days of access to one of a number of 

PPV programs infrequently, the digital coupon credit may available premium program services, the selected premium 

allow the terminal to order a first PPV program at half-price. 65 program service can be monitored, and the subscriber can be 

The digital coupon may be generated automatically based on subsequently offered a digital coupon which allows him to 

program coupon criteria established by the service provider. upgrade to the selected premium program service, e.g., at 
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one- half off the normal charge for the first month. Various demultiplexer/demodulator 205 of the terminal 170 receives 

other marketing strategies may be used with the present the program service data, digital coupon information, and 

invention to enhance revenue and customer goodwill. For control data from the path 122 and hub 124. Demultiplexing 

example, a subscriber may be given coupon credit for a free and demodulating is performed using conventional tech- 

pay-pcr view movie on his birthday. 5 niques. The encrypted program service data is provided to a 

Moreover, the digital coupon balance may be adjusted decryption processor 212 and a switch 218 via lines 210 and 

according to lotteries or other contests or games. For 214 respectively while the encrypted control data and 

, to . ., . i * . °. c digital coupon information are provided to a secure proces- 

example, subscribers may be able to enter a lottery for • r <»*n 

\ . r -i j , ■ . c J sot 220 via line 230. 

additional coupons if they spend a certain amount of money. ^ t , ... 

« i • * r l m The encrypted program service is decrypted by the 

Or, the subscriber may play interactive games of chance 10 de 2 f 2 t0 rovide a clear ^ at 0 ' ut t 

where the prizes and losses are determined in terms of n6 $ the S ecryption pr0C es*> r . The secure processor 220 

coupons. ma y rece j ve (he decrypted digital coupon information from 

However, even if the usage pattern data is not reported the decryption processor 212. The decryption processor 212 

back to the function 125, the monitoring means in the can utilize a conventional decryption scheme, such as that 

terminal can determine whether the usage pattern data meets 15 disclosed in Gilhousen, et al., U.S. Pat. No. 4,613,901 

the preconditions of the digital coupon information. entitled "Signal Encryption and Distribution System for 

Preferably, this is done in a secure manner to prevent Controlling Scrambling and Selective Remote Descram- 

tampering by pirates, as discussed in further detail below. bling of Television Signals," or Bennett et al., U.S. Pat. No. 

The controller 130 causes the digital coupon information 4,864,615 entitled "Reproduction of Secure Keys By Using 

from function 135 to be encrypted and multiplexed at the 20 Distributed Key Generation Data," both incorporated herein 

encryp tor/mux/modulator 150 along with the program ser- ^ re erence - 

vice data from function 140 and the control data from The decryption processor requires wo rkmg keys (WK) to 

function 145. I^he program service data may comprise video the S1 § nal f t in P u L l theret0 via hne 21 °„ J*» c workin S 

. , j- j ♦ ■ u- l • * ji ii * j ■ keys are generated by the secure processor 220 in response 

and/or audio data which is stored locally on storage media, 4 ° . . . J . , . \. „. £ " . 

, , u * u ■ i £■ t J , u 25 to the control signals received via line 230. Firmware for the 

and/or which is received from an external source such as a • . j ■ j i /r>™/\ 

... . , A , . , , secure processor is stored in read only memory (ROM) 224. 

satellite downlink. Alternatively, the program service data The secufe ^ 220 is also M with random 

may comprise computer software or other electronic infor- acC£SS memory (RAM) 222 A secure ponion of ^ 

matl0n " 222 holds unit specific keys and/or seeds for use in decryp- 

The control data includes cryptographic data which is 3Q tion of a monthly group key, as discussed in greater detail in 

used for generating working keys at the terminals for connection with FIG. 3. 

decoding the received data. Typically, one or more premium a user interface 226 enables a viewer to select program 

program services are communicated with basic program services for viewing on a television (TV) 180. If a user is 

services over the channel 120, Both the basic and premium authorized to receive the selected service by subscription, 

program services may be accessed with possession of the 35 individual purchase (e.g., pay per view), or according to a 

appropriate group key or keys. The group key or keys are digital coupon credit, the secure processor 220 will actuate 

delivered as part of an Entitlement Management Message the switch 218 to couple the decrypted output 216 from 

(EMM). Possession of the group key or keys along with the decryption processor 212 to the TV 180 via user interface 

appropriate entitlement control data allows the terminals to 226. Otherwise, the user interface and TV will only receive 

recover program keys from the program data sent by the 4Q the encrypted signal via line 214 and switch 218. As will be 

service provider in Entitlement Control Messages (ECM). appreciated by those skilled in the art, switch 218 could 

The program keys allow the derivation or decryption of alternatively be configured to provide a barker channel (e.g., 

the working keys which are used to encrypt the program- a fixed message) to the user, or no signal at all, in the event 

ming signal at the uplink or headend side, and to decrypt the that the user is not authorized to access the selected service, 

program signals on the downlink or consumer decoder side. 45 The secure processor 220 monitors the programming 

The term "recover" is used herein to indicate that a program which is selected by the user via the user interface 226 to 

service is received at a terminal and retrieved for use (e.g., determine whether the user has met the preconditions for 

display) by the subscriber. obtaining the digital coupon credit. For example, if the 

The control data included in an Entitlement Control digital coupon provides a credit for one free PPV program 
Message (ECM) is used to control access to a particular 50 when five PPV programs are purchased at the regular price, 
program service (i.e., channel). The ECM control data tells the secure processor will record each occurrence of a pur- 
ine terminal which entitlement needs to be held by the chase of a PPV program. The RAM 222 may be used to store 
terminal in order to be authorized to access and recover the the corresponding data. The usage pattern data thus includes 
particular program service. Typically, the ECM message data which is related to the digital coupon preconditions but 
which delivers the control data information is also used to 55 can include other user selections as well. A communication 
deliver the program key information. The ECM message interface 230 such as a data modem is provided to allow the 
therefore not only defines program parameters but also terminal to transmit buy orders for VOD programming and 
delivers a key or precursor key (e.g., pre-key). certain types of programming which require a service pro- 

The ECM control data may further include data for vider's authorization for acquisition to the PPV order pro- 
providing the terminals with the cost for ordering a PPV go cessing function 115 of FIG. 1. PPV purchases processed 
program. This control data may further indicate the cost, in locally by the terminal and stored internally to the terminal 
terms of the number, and type of coupons required to access may be forwarded to the PPV processing function for billing 
the program, along with other details listing what number of purposes. The interface 230 also allows the terminal 170 to 
coupons is required for a discount, and so forth. transmit the usage pattern data to the usage pattern data 

FIG. 2 is a block diagram of a subscriber terminal in 65 accounting function 125 of FIG. 1. 

accordance with the present invention. Like-numbered ele- The terminal receives control data in the form of an 

ments correspond to the elements of FIG. 1. A Entitlement Management Message (EMM) which provides 
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an initial currency credit balance for the terminal 170. In this 
case, when a user orders PPV programs, for example, the 
overall currency credit balance is decreased by the cost of 
the programs. The EMM message originating from the 
service provider may or may not deliver an initial or 
additional coupon credit to the terminal. 

Typically, coupon credit is generated when the precondi- 
tions for obtaining the digital coupon credit are realized. The 
coupon credit balance can be immediately adjusted. As an 
illustration, assume the initial credit balance is $40, and each 
PPV program costs $5. Then, the credit balance will drop 
successively to $35, $30, $25, $20 and $15 after the first five 
programs are purchased. At this time, the usage pattern data 
meets the preconditions of the digital coupon information, 
and the coupon credit balance gets incremented by one. 

Alternatively, the coupon credit balance is incremented by 
one with each PPV purchase. When the terminal tunes in to 
the sixth program, the terminal receives a Entitlement Con- 
trol Message (ECM) for the program. The terminal uses the 
ECM to determine the different ways that the program may 
be accessed. The ECM will also describe the currency cost 
and the coupon cost, if the program is available by coupon. 
The terminal will automatically determine whether or not 
the terminal has a coupon or coupons to acquire the pro- 
gram. If so, the program is automatically offered to the 
viewer, or the viewer is prompted to purchase the program 
using currency or coupons. 

By choosing the coupon option, the next order for a PPV 
program is provided free, and the coupon credit field is 
decremented appropriately. Thus, the balance remains at 
$15. Alternatively, the terminal is charged for the sixth 
program, but the secure processor increments the credit 
balance by the cost, so there is no net change in the credit 
balance. The secure processor may provide a display on the 
user interface 226 that informs the viewer that the precon- 
ditions of the digital coupon information have been met. Of 
course, it is possible for coupon credits to accumulate when 
the corresponding preconditions are met but the credits are 
not realized, i.e., cashed in. The credits may be retained in 
the terminal for a predetermined period such as two or three 
months, or indefinitely. The secure processor may inform the 
subscriber if the credits are about to expire. 

As described in further detail below in connection with 
FIGS. 4-6, the viewer may query the user interface 226 to 
determine the credit balance along with other related infor- 
mation. 

FIG. 3 is a block diagram illustrating a decryption hier- 
archy for use in accordance with the present invention. An 
encrypted program pre-key is input via terminal 340 to a 
decryption function 344 which also receives a monthly 
group key via terminal 342. The program pre-key is unique 
to each encrypted program offering (e.g., television 
program) that is available for decryption. The group key is 
changed on a periodic basis, e.g., once each month. The 
decryption function 344 decrypts the encrypted program 
pre-key to provide a program pre-key that is used as one 
input to a one-way function 348. The other input to one way 
function 348 comprises various program and coupon 
attributes, including access requirements, such as coupon 
and currency cost, for the corresponding program. The 
access requirements must be met to obtain authorization to 
view the program. The program and coupon attributes are 
input via terminal 346, and the one way function processes 
the program pre-key and program attributes to provide a 
program key. 

The program key output from one way function 348 is 
used as one input to another one way function 352 that also 



7,872 

10 

receives, via terminal 350, an initialization vector (IV) 
representative of time. The processing of the initialization 
vector and program key by one way function 352 generates 
the working keys required by decryption processor 212 of 
5 FIG. 2 to decrypt the program service selected by an 
authorized user. A further description of the generation of the 
various keys, including working keys (provided in a 
"keystream"), can be found in the aforementioned Bennett, 
et al. patent. 

10 Optionally, the digital coupon information and program 
services can be encrypted according to a common crypto- 
graphic key. This could allow an authenticated file, for 
example, which represents a coupon image, to be sent to the 
decoders. The coupon could subsequently be redeemed as an 

15 authenticated image by transmitting the coupon from the 
decoder to the program service provider or other accounting 
center. 

FIG. 4 is an on-screen display for a user interface in 
accordance with the present invention. The display 400 may 

20 be invoked as part of a graphical user interface (GUI) which 
allows a user to select channels and control other features 
such as volume and the like. Such interfaces are well known 
in the art. The display 400 may be controlled by a hand-held 
remote control, a pointing device, voice command or any 

25 other available means. For example, a user may select a PPV 
program such as a movie from a graphical user interface 
which causes the display 400 to appear. 

The display 400 includes a field 410 which informs the 
user that he is not currently subscribed to the selected 

30 

program. That is, the user must order the program. A field 
420 informs the user that he has different options in ordering 
the program. Fields 430-460 present the options. A field 440 
presents a first option wherein the movie may be purchased 

35 as an impulse pay-per-view (IPPV) program with the cost 
being deducted from an available cash credit balance. The 
user is thus informed of the cash cost of the movie and the 
available cash credit balance. The program can be purchased 
as long as there is a sufficient cash credit balance. 

4Q A field 450 presents a second option, where the program 
may be purchased using digital coupons alone. The user is 
informed of the coupon cost of the movie and the available 
coupon credit balance. The program can be purchased as 
long as there is a sufficient coupon credit balance. The digital 

45 coupons are referred to here as "TV" coupons. 

A field 460 presents a third option, where the program 
may be purchased using a combination of cash and digital 
coupons. The user is informed of the cost of the movie using 
both coupons and cash, and the available cash credit balance 

50 and coupon credit balance. While only one cash/coupon 
combination is provided in field 460, it will be understood 
that other combinations may also be provided. In fact, the 
coupons may be assigned a cash value for this purpose. 
In another option, not shown, a subscriber may order a 

55 PPV program for a discount if the subscriber is willing to 
have commercial messages appear which would not other- 
wise be present. For example, a commercial message using 
teletext may appear on the bottom portion of the screen 
when viewing a PPV movie. Or, with VOD, the PPV movie 

60 chosen may have periodic commercial message breaks when 
the discounted program is selected, whereas no commercials 
would be provided otherwise. 

FIG. 5 is another on-screen display for a user interface in 
accordance with the present invention. Here, the display 500 

65 provides information on the number of coupon credits which 
have been accumulated while viewing different channels. 
For example, the various program service providers may 
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provide viewers with coupons based on the number of hours chased a given number N of PPV programs in the last M 

of that service provider which is viewed per week, and/or days (block 722), in which case a digital coupon credit "1" 

which programs were viewed. is awarded at block 724. It will be appreciated that different 

Fields 510 and 530 list the various program service types and amounts of coupons may be awarded according to 

providers, while fields 520 and 540 list the number of 5 the particular precondition which the viewer meets. For 

coupon credits which have been accumulated. For example, example, some coupon credits may be more valuable than 

for the service provider Home Box Office (HBO), there is a others, or may be redeemed for different benefits, 

balance of four coupons.-In this manner, the program service M blo<± ?26 [f [{ {s determined that the subscriber has 

providers may compete to encourage viewership For purchased X$ of PPV programs in the last Y days, a digital 

example, when launching a new program, additional cou- 1Q * b{ock ng ^ * if 

pons may be provided. Furthermore, coupons may be accu- , r , . , „. ~ . .„ - . ' 

mulated based on the time of day or day of week that the subscriber has viewed an infomercial for a number Z 

programs are viewed. Moreover, program service providers mmutes > a dl S ltal cou P on 3 15 awarded at block 732 ' ^ 

that are commonly owned may award coupons to encourage "infomercial" is a commercial message that has the length 

viewership of their programs and format of a regular program, e.g., such as one-half hour 

FIG, 6 is yet another on-screen display for a user interface 15 or more - and generally garners a relatively small audience, 

in accordance with the present invention. The display 600 K)r marketing purposes, it is desirable to reward viewers for 

provides an example of the variety of items from which the viewin S mtomeraals even though there is no charge 

subscriber may select using the digital coupons of the incurred for viewing the program. Optionally coupon credit 

present invention. Moreover, each of the program service ma V be awarded onl y for the first viewm S of the Program, 

providers along with other interested parties may offer their 20 so additional coupon credits are not awarded for repetitive 

own items. A field 610 indicates that the particular display viewing of the same program. 

600 is that of the service provider Cable News Network At block 734, if the subscriber has upgraded from a basic 

(CNN). A field 620 indicates the current coupon credit programming tier to a premium programming tier, or to a 

balance, while a field 630 indicates the items that may be higher premium programming tier, a digital coupon "4" is 

obtained, and field 640 indicates the number of coupons 25 awarded at block 736. At block 738, if a promotional period 

needed to obtain each item. is in progress, a digital coupon "5" is awarded at block 740. 

Thus, the user may redeem the digital coupons for a wide Such a promotional period would generally apply to all 

variety of items, including additional programming that can subscribers. 

be communicated to, or accessed by, the terminal as well as 3Q At block 750, the total amount of coupon credits is 

non-programming items which can be delivered to the user's determined. At block 760, if the coupon credit balance is 

home, e.g., by mail. above zero, then at block 770, the user is prompted by the 

Some items may not require any digital coupons. For user interface (e.g., every time the television is turned on) to 

example, a field 650 describes product information which seiect among the various options which are available in 

can be communicated to the subscriber's terminal or deliv- 35 redeeming the digital coupons. For example, the subscriber 

ered to the subscriber's home at no cost. However, when the mav order ppv programming for a discount or no charge, 

subscriber requests the product information, the usage pat- access premium programming for a predetermined period of 

tern data is updated and may be subsequently provided to the time > or simply pass and take advantage of the available 

usage pattern data accounting function 125 of FIG. 1, where options at another time. The various options have been 

it may be used for marketing purposes. 40 discussed above in greater detail in connection with FIGS. 

FIG. 7 is a flowchart illustrating a method for providing 4 " 6 ' In addition t0 the P eriodic P rom P ts described above, a 
digital coupons in accordance with the present invention. user wm also have the capability of accessing the coupon 
The flowchart describes an embodiment where an initial redemption menu at any time via the remote control 
cash credit balance is provided to a terminal, for example, on At block 780, the digital coupon balance is adjusted by the 
a monthly basis. Then, when the user desires to view 45 number of coupons redeemed at block 770, and the moni- 
programming such as PPV programming that has an asso- tor ing of the terminal usage pattern continues at block 720. 
ciated cost, the cost is deducted from the cash credit balance. Note that it is possible to verify that the user is actually 
Furthermore, when the user meets the preconditions of the viewing a particular program by requiring some sort of 
digital coupon information as determined by the usage subscriber involvement. For example, to verify that a sub- 
pattern data, a coupon credit balance is accumulated. The 50 scriber has watched an infomercial for Z minutes, the 
coupon credit balance may be used to purchase additional terminal may require the subscriber to input a command to 
program services in lieu of cash, or, optionally, to defray the the user interface. The user interface may provide a message 
cost of programs already purchased. In the latter case, the such as "Do you wish to continue", to which the subscriber 
coupon credits may be assigned a cash value. must respond to meet the digital coupon preconditions. An 

At block 705, the controller at the transmitter delivers an 55 internal timer within the terminal may be halted until a 

initial cash credit balance to the terminals. The amount response is received. 

delivered to each terminal may be different and may be For subscribers who view infomercials and the like, to 
based, for example, on past purchasing habits. At block 710, ensure that only one set of coupons are awarded per 
the controller delivers the digital coupon information to the program, the COUPON_RECORD_DURATION field as 
terminals. Again, different terminals may receive different 60 discussed below in Table 3 is provided to indicate a duration 
coupon data according to demographic factors and the like. in which the program record of the infomercial is stored in 
At block 720, the terminal usage pattern is monitored and the terminal. This precludes the same subscriber from get- 
recorded. In particular, events which meet the preconditions ting repeated coupons for the same infomercial that is run 
of the digital coupons are recorded, while other data indica- again and again, while still enabling the same program ID 
tive of user habits may also be recorded. 65 for the infomercial to be used repeatedly. 

The digital coupon preconditions may account for a The data delivery syntax set forth below in Tables 1—4 

variety of events, such as whether the subscriber has pur- may be used in accordance with the present invention. 
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Tables 1-3, respectively, describe data fields which may be 
used when digital coupons are delivered to terminals using 
an EMM, an IPPV ECM purchase linkage, and a program 
re-key ECM. Table 4 describes data fields which may be 
used with all delivery methods. It should be appreciated that 
the syntax shown is for illustration only and that other data 
delivery schemes may be substituted. 



TABLE 1 


Syntax 


Size 


Description 


COUPON_PROVIDER_ID 


3 bytes Identifies coupon sponsor 


NEW_COUPON_CREDIT 


3 bytes Absolute number of 






coupons for service 






provider in a month 


NEW_COUPON_DEBIT 


3 bytes Absolute debit for service 






provider in a month 


COUPONUCREDIT 


3 bytes Total accrued coupons 


COUPON_SEQ_NUMBER 


1 byte 


Epoch (time period) of 






coupon delivery 


TABLE 2 


Syntax 


Size 


Description 


COUPON_PROVlDER„lD 


3 bytes 


i Identifies coupon sponsor 


COUPONUCREDIT 


1 byte 


Coupon credit remaining 


TABLE 3 


Syntax 


Size 


Description 


COUPON__ID 


2 bytes 


COUPON_ID + 




COUPON_PROVIDER_JD - 






unique coupon ID) 


COUPON_PAYOUT_ 


2 bytes 


Time period subscriber 


DURATION 




must view program to obtain 






coupon credit. 


COUPONLRECORD_ 


3 bytes 


Time period coupon is 


DURATION 




retained at terminal 


COUPON_PROVIDER_JD 


3 bytes 


Identifies coupon sponsor 


TABLE 4 


Syntax 


Size 


Description 


COUPON_DEBIT 


2 bytes 


Number of accrued coupon 




debits 


COUPON_PACKAGE_ID 


2 bytes 


Type of coupon for package 






program 


ippv_cREDrr 


2 bytes 


Cash credit balance for 






pay-per-view 


PACKAGE_PROVIDER 


2 bytes 


Identifies service provider of 


ID 




package of programs 


PKG_COST 


1 byte 


Cash charge for package 






program 


PKG_ID 


1 byte 


Identifies package 


PROGRAM_PAYOUT_ 


1 byte 


Minimum time subscriber 


DURATION 




must view program to gain 






credit 


PROGRAM_[NFORMA- 


2 bytes 


Video/audio data of 


TION 




program 


SHOW_COUNT 


2 bytes 


Count of shows purchased 


VH_LIMIT 


2 bytes 


View History Limit before 






report back is mandatory 


VIDEO PROVIDER ID 


2 bytes 


Identifies service provider 
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To thwart piracy, digital coupons may only be offered to 
subscribers with established impulse PPV accounts where 
there is a report-back capability. This can be effected, for 
example, by using a bit as a flag in either the group re-key 
EMM or Program re-key ECM. 



45 



50 



55 



60 



65 



The report-back feature discussed above in connection 
with the usage pattern data accounting function 125 of FIG. 
1 allows the program service providers and network con- 
troller to monitor the audience size for different programs. 
The use of digital coupons can therefore allow the service 
providers to detect viewership patterns over a wide cross- 
section of programs, and not just premium shows. In other 
words, shows which are not available through PPV might be 
made available through coupons. 

In the following program delivery scenarios, it is assumed 
that a real channel (i.e., program) must exist which can be 
purchased with coupons. This can be enforced by hashing 
the program information to generate a program key as 
explained further below. Therefore, a program cannot be 
viewed using digital coupons unless it is actually offered to 
coupon holders. 

However, pirates may attempt to tamper with the delivery 
of the coupons. The main objective of the pirate is to defeat 
the system by providing false messages (e.g., "spoofing") to 
obtain digital coupons without having to perform any of the 
coupon preconditions. In accordance with the present 
invention, different ways to securely delivery the 
COUPON_CREDIT field to terminals are discussed. 

There are three ways to deliver the digital coupons, i.e., 
using a group re -key EMM, an IPPV purchase linkage, or a 
program re-key ECM. The group re-key message technique 
can handle a distribution of coupons to a general population 
of terminals as well as providing a method that is linked to 
IPPV purchases. IPPV purchase linkage could be done 
independently from group re-key message delivery, how- 
ever. The delivery of coupons via the group re-key message 
may be mutually exclusive from the program re-key tech- 
nique since, with the program re-key technique, the network 
controller or PPV order processing center does not know 
how many coupons a subscriber might earn using the 
method where the coupons are generated internally by the 
terminal. Thus, management of group re-key based coupons 
cannot be handled as securely inside a terminal unless group 
re-key based coupons are tracked separately from program 
re-key based coupons. 

Direct delivery of coupons through a group re-key entitle- 
ment management message (EMM) is the most straightfor- 
ward way to control the delivery of coupons to subscribers. 
This approach is suitable for IPPV service providers who 
decide to reward particular subscribers based, for example, 
on previous purchasing volume. The service provider thus 
knows which particular subscribers are to receive the digital 
coupons and can therefore direct a unit specific EMM to 
each of the subscribers. 

Additionally, the group re-key EMM approach is suitable 
for providing subscribers with digital coupons along with a 
designator which allows text message commercials. These 
on-screen displays convey advertising and can be overlaid 
on top of the video and audio displayed. As discussed 
previously, these subscribers are willing to view such com- 
mercials to obtain digital coupon benefits such as discounts 
on other programs. Again, the service providers know 
exactly which subscribers agreed to have text message 
commercials delivered to them, and can therefore provide 
them with the corresponding digital coupons through an 
EMM. 

Moreover, using the COUPON„CREDIT and 
VH„LIMIT data fields, individual service providers can 
send digital coupons to individual subscribers. Each service 
provider is identified by the field VIDEO_PRO VIDEK_JD. 
If a pirate were to synthesize a group key message with a 
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false VIDEO_PROVIDER__ID and COUPON_CREDIT, 
thereby resulting in a bad group key, the pirate might be able 
to create false VIDEO„PROVIDER__ID, COUPON_ 
CREDIT pairs inside the terminal. 

One solution to the above problem is implemented using 
EMM authentication. In particular, if the group re-key EMM 
used by a transmitting satellite, for example, is hashed. The 
hash is then encrypted to create a signature. A pirate cannot 
produce a counterfeit group re-key EMM without knowl- 
edge of a terminal's unit keys, and the key hierarchy. In this 
case, the counterfeit message will be rejected without pro- 
cessing. Another way to authenticate a message is to use 
public key cryptography to sign or encrypt the entire mes- 
sage. This can also prevent the generation of counterfeit 
messages. 

Furthermore, a pirate may use "replay" attacks using 
legitimately built messages. In this case, a legitimate mes- 
sage is saved and provided to a terminal months after the 
message was originally created and first used to make new 
COUPON_CREDIT inside the terminal. To protect against 
this, group sequence numbers may be incremented. 

Moreover, the pirate may attempt to replay the message in 
the same month that it was generated. To protect against this, 
new COUPON CREDIT could be tracked during a particu- 
lar month. At the end of the month, it can be added to 
COUPON_CREDIT that was earned in previous months. 
When the COUPON_CREDIT FIELD is sent to the termi- 
nal during the month in the group re-key EMM, it would be 
the absolute coupon credit issued to a particular terminal. 
Moreover, an additional field, COUPON_DEBIT, may be 
created inside the terminal to manage the coupons from a 
particular service provider for that month. Another way to 
secure against replay attacks within the same month would 
be to sequence the EMMs themselves. The decoder may 
then be able to differentiate between a new message and one 
that it has seen before. Another method would be to include 
a date/time parameter in the EMM. As with a sequence 
number, this field can only go forward or stay the same, but 
cannot be changed to a past value. 

For each individual service provider, any new 
COUPON_CREDIT value must be authenticated, e.g., in 
the group re-key message just as with the COUPON_ 
CREDIT and VH_LIMIT fields since merely signing the 
message or using public key cryptography will not prevent 
such replay attacks. Moreover, each new coupon record 
should track the sequence number which indicates when it 
was generated. When the group key epoch occurs, the group 
re-key EMM that was originally used to create the coupon 
record will not be able to create additional coupons since the 
message will be old. At that time, the new COUPON_ 
CREDIT can be added to old COUPON__CREDIT. If, 
during the next month, no new coupons are sent to the 
terminal, and all of the existing coupons are used, then the 
entire coupon record can be erased. 

In a second digital coupon delivery method, coupons are 
delivered through an IPPV buy linkage. With each IPPV 
purchase, a bit in the program re-key message allows a 
service provider to deliver one or more coupons automati- 
cally and instantly to subscribers without waiting to get a 
report back or performing a "trip" (e.g., delivery) with 
coupons as in the group re-key method discussed above. If 
a subscriber did not have any coupons from a particular 
service provider before, a new service provider coupon 
record is made. The coupon creation process is therefore 
tightly linked to actual purchases of IPPV programs. After a 
number of coupons have been accrued, the subscriber can 
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redeem them. Typically, a service provider will offer digital 
coupons which can be redeemed only for that service 
provider's programs. However, groups of service providers 
may collaborate to provide interchangeable coupons if 
5 desired. 

In another possible pirate attack, a pirate may attempt to 
manipulate the number of coupons which are awarded when 
performing the digital coupon preconditions, e.g., such as 
purchasing a number of IPPV programs. One possible 
io solution uses a DES hash with encryption (e.g., signature) or 
public key encryption of the program re-key message. If the 
number of coupons is authenticated in the IPPV report -back, 
then the pirate's manipulation of this field would cause a bad 
cryptographic field. 
15 If the pirate does know the group key, counterfeiting 
could occur but may be detectable if the view history 
information (e.g., usage pattern data) is used to hash the 
coupon value and is sent along in the report-back. 

Moreover, if public key cryptography was used in the 
delivery of the program re-key message, then, even if the 
pirate knew the group public key, a message still could not 
be synthesized since the group private key would not be 
known. Public key cryptography has a distinct advantage 
over secret key cryptography since the group encrypt or 
25 private key is not in the terminal. Consequently, VLSI 
probing and other attacks against the terminal cannot reveal 
the key. 

In a third delivery method in accordance with the present 
3Q invention, digital coupons are delivered in conjunction with 
extended commercial programs known as "infomercials." 
Preferably, a subscriber is rewarded with digital coupon 
credits only after viewing the program for a specific amount 
of time. Furthermore, to prevent the subscriber from simply 
35 tuning in the program and walking away, it might be 
advantageous to require some sort of subscriber involvement 
such as a control input which is requested by the user 
interface. 

A pirate may be able to alter code in a non-secure 

4 q processor to automatically provide the subscriber involve- 
ment control signal. However, the amount of time that the 
program must be viewed, or at least tuned in, can be secured. 
To do this, there is no need to track the maximum time that 
the program lasts since the infomercial service provider is 

4 5 essentially paying the subscriber to view the program. The 
PROGRAM__PAYOUT„DURATION field can be loaded 
into a countdown timer to enforce the minimum viewing 
time requirement of the digital coupon preconditions. The 
coupons arc thus issued when the timer counts down to zero, 

5 q and the timer counts down only when the infomercial 
channel is tuned in. Essentially, this ties up the terminal to 
tune in the infomercial and precludes it from tuning in 
another channel. 

Furthermore, the COUPON_RECORD_DURATION 

55 field is required to determine when the program record 
should be expunged from the secure processor's memory. 

A pirate may attempt to manipulate the field in the 
program re-key ECM, which indicates how many coupons 
arc to be awarded when viewing the infomercial. One 

60 possible solution is to use a DES hash (e.g., signature) or 
public key encryption of the program re-key message. Like 
the other attacks described above, signing the program 
re-key message makes it hard for the pirate to counterfeit the 
program re -key message without knowledge of the group 

65 secret key or private key. Moreover, if public key cryptog- 
raphy is used in the delivery of the program re-key message, 
then, even if the group public key was known by a pirate, a 
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message could not be synthesized since the group private 
key is not known. 

In another possible pirate attack, the pirate records legiti- 
mate program messages, and repeatedly plays back the 
messages to the terminal. The pirate may modify the termi- 5 
nal to provide control inputs directly to the chip or via the 
user interface to increase the number of coupons held by the 
chip. One solution to this attack is to create and store a 
program record in memory. In particular, the COUPON_ 
CREDIT field is used to authenticate the number of coupons 10 
being awarded. In addition to COUPON__PKG__ID and 
COUPON_PROVIDER_ID, two duration timers are 
needed instead of one. One timer, COUPON_PAYOUT„ 
DURATION, tracks how long the subscriber must be tuned 
to the program before coupons are awarded, and the other ]5 
time, COUPON_RECORD_DURATION, tracks when the 
program record can be expired from memory. The amount of 
time that a record should be retained might be two months, 
for example. 

Delivery of program re -key messages by public key is a 20 
safer mechanism. A pirate would need to cryptographically 
search for the group private key to alter program re-key 
messages. The group private key is not delivered to any 
terminal anywhere in the network. The length of the group 
public keys delivered could expand according to the per- 25 
ceived piracy threat. And, the group public and private keys 
may be changed through the delivery of new EMMs. If there 
is a system breach, the infomercial feature could be aban- 
doned simply by making program re -key ECMs with the 
coupon issuing feature missing, or not allowing IPPV pur- 30 
chases with coupons. 

In the above discussion, it was seen that there are three 
distinct methods for delivering coupons to the terminals. The 
first is group re-key EMM based, the second is tightly tied 
to IPPV authentication, and the third is Program Re -key 35 
ECM based using the "infomercial" concept. 

The group re-key method is similar to how IPPV is 
implemented with the only absolute COUPON_CREDIT 
given, and requiring a COUPON_DEBIT field to exist 4Q 
inside the terminal for each service provider with a 
COUPON_PROVIDER_ID. 

The IPPV purchase linkage method is a hybrid between 
the group re-key method and the program re-key method 
since it takes advantage of IPPV authentication that is 45 
already done and securely authenticated inside the terminal, 
and yet is delivered by a program re -key ECM with the 
appropriate parameters set. Coupons using this method can 
only be delivered through a real IPPV purchase. 

With the program re-key method, coupon redemption may 50 
or may not be tied to the view history report-back. For 
auditing of viewership, coupon redemption is tied to the 
report-back since a communication link such as a telephone 
network is required. 

Accordingly, it can be seen that the present invention 55 
provides a system for transmitting digital coupons to sub- 
scriber terminals for various promotional purposes. By 
delivering and managing the coupons electronically, the 
coupons are more likely to be used by the subscribers, and 
distribution and handling costs for the promoters are sig- 60 
nificantly reduced. Subscriber loyalty can be rewarded, 
while subscribers can also be selectively targeted to try out 
programming in which they are likely to have a special 
interest. Subscribers can be even be encouraged to view 
commercial programming such as infomercials. 65 
Additionally, with an optional report back feature, terminal 
usage pattern data can be retrieved and analyzed to deter- 
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mine the effectiveness of the promotions and to gather 
additional demographic and individual data. Furthermore, 
the integrity of the scheme can be assured with various 
encryption techniques. 

Although the invention has been described in connection 
with various specific embodiments, those skilled in the art 
will appreciate that numerous adaptations and modifications 
may be made thereto without departing from the spirit and 
scope of the invention as set forth in the claims. 

For example, accounting of the coupon credit balance 
may be maintained by the network controller or other entity 
apart from the terminal. This accounting may be updated 
real-time as the coupon balance changes, or periodically, 
such as where an automatic telephone report back capability 
is provided. 

What is claimed is: 

1. A transmitting end apparatus of a subscriber television 
network, comprising: 

a programming services data function for providing pro- 
gramming services; 
a digital coupon information function for providing digital 

coupon information; and 
a controller; wherein: 

said controller is responsive to said programming ser- 
vices function for transmitting the programming 
services to a plurality of subscriber terminals of the 
network via a communication channel; 
said programming services are adapted to be recovered 

by said subscriber terminals; 
said controller is responsive to said digital coupon 
information function for delivering the digital cou- 
pon information to said terminals via said commu- 
nication channel; 
said digital coupon information defines preconditions 
for enabling said terminals to obtain credits when 
recovering the programming services; and 
said digital coupon information enables the terminals to 
maintain a running credit balance according to cred- 
its obtained and credits redeemed. 

2. The apparatus of claim 1, wherein: 
the credits are redeemable by users at the respective 

terminals for obtaining programming services at a 
reduced charge. 

3. The apparatus of claim 1, wherein: 
the preconditions require that the respective terminals 

recover particular programming services to obtain 
credits. 

4. The apparatus of claim 1, wherein: 
the preconditions require that the respective terminals 

recover a specified number of the programming ser- 
vices to obtain credits. 

5. The apparatus of claim 1, wherein: 
the preconditions require that the respective terminals 

recover the programming services for a specified dura- 
tion to obtain credits. 

6. The apparatus of claim 1, wherein: 
the preconditions require that the respective terminals 

incur a specified amount of charges in recovering the 
programming services to obtain credits. 

7. Itie apparatus of claim 1, further comprising: 
encryption means operatively associated with said con- 
troller for encrypting said digital coupon information 
and said programming services, prior to transmission to 
the terminals, according to a common cryptographic 
key. 
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8. The apparatus of claim 1, wherein: 

said digital coupon information function provides differ- 
ent digital coupon information for different ones of the 
terminals. 

9. The apparatus of claim 8, further comprising: 
a usage pattern accounting center operatively associated 

with said controller, and adapted to receive usage 
pattern data from the terminals; wherein: 
said digital coupon information function is responsive 
to said usage pattern accounting center and said 
usage pattern data for providing the different digital 
coupon information. 

10. The apparatus of claim 9, wherein: 
the usage pattern data indicates a viewing history of the 

programming services at the terminals over a specified 
time period. 

11. The apparatus of claim 1, wherein: 
the controller transmits data to the terminals via the 

communication channel for establishing an initial 
credit balance at the terminals. 

12. A transmitting end method for a subscriber television 
network, comprising the steps of: 

providing programming services and digital coupon infor- 
mation at the transmitting end; and 
transmitting the programming services and the digital 
coupon information from the transmitting end to a 
plurality of subscriber terminals of the network via a 
communication channel; wherein: 
the programming services are adapted to be recovered 

by the subscriber terminals; 
the digital coupon information defines preconditions 
for enabling the terminals to obtain credits when 
recovering the programming services; and 
the digital coupon information enables the terminals to 
maintain a running credit balance according to cred- 
its obtained and credits redeemed. 

13. The method of claim 12, wherein: 
said credits are redeemable by users at the respective 

terminals for obtaining programming services at a 
reduced charge. 

14. The method of claim 12, wherein: 
the preconditions require that the respective terminals 

recover particular programming services to obtain 
credits. 

15. The method of claim 12, wherein: 
the preconditions require that the respective terminals 

recover a specified number of the programming ser- 
vices to obtain credits. 

16. The method of claim 12, wherein: 
the preconditions require that the respective terminals 

recover the programming services for a specified dura- 
tion to obtain credits. 

17. The method of claim 12, wherein: 

the preconditions require that the respective terminals 55 
.incur a specified amount of charges in recovering the 
programming services to obtain credits. 

18. The method of claim 12, comprising the further step 

of: 

encrypting said digital coupon information and said pro- 
gramming services at the transmitting end, prior to 
transmission to the terminals, according to a common 
cryptographic key. 

19. The method of claim 12, comprising the further step 

of: 

providing different digital coupon information for differ- 
ent ones of the terminals. 
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receiving usage pattern data from the terminals at the 
transmitting end; wherein: 

the different digital coupon information is provided in 
response to the usage pattern data. 

21. The method of claim 20, wherein: 

the usage pattern data indicates a viewing history of the 
programming services at the terminals over a specified 
time period. 

22. The method of claim 12, comprising the further step 
of: 

transmitting data from the transmitting end to the termi- 
nals via the communication channel for establishing an 
initial credit balance at the terminals. 

23. A subscriber terminal in a subscriber television 
network, comprising: 

means for recovering programming services and digital 
coupon information from a transmitting end of the 
network via a communication channel; 

means for processing said digital coupon information to 
determine preconditions thereof for enabling the ter- 
minal to obtain credits when recovering the program- 
ming services; and 

means for maintaining a running credit balance according 
to credits obtained and credits redeemed. 

24. The terminal of claim 23, wherein: 

said credits are redeemable by a user at the terminal for 
obtaining programming services at a reduced charge. 

25. The terminal of claim 23, wherein: 

the preconditions require that the terminal recover par- 
ticular programming services to obtain credits. 

26. The terminal of claim 23, wherein: 

the preconditions require that the terminal recover a 
specified number of the programming services to obtain 
credits. 

27. The terminal of claim 23, wherein: 

the preconditions require that the terminal recover the 
programming services for a specified duration to obtain 
credits. 

28. The terminal of claim 23, wherein: 

the preconditions require that the terminal incur a speci- 
fied amount of charges in recovering the programming 
services to obtain credits. 

29. The terminal of claim 23, wherein: 

the digital coupon information is customized for the 
terminal. 

30. The terminal of claim 23, further comprising: 
monitoring means for monitoring a usage pattern of the 

terminal to determine if said preconditions have been 
satisfied; wherein: 

said maintaining means is responsive to said monitor- 
ing means for maintaining said running credit bal- 
ance. 

31. The terminal of claim 30, further comprising: 

a communication interface for communicating data 
indicative of said usage pattern from said monitoring 
means to a usage pattern accounting center at the 
transmitting end; wherein: 

said usage pattern data enables the transmitting end to 
customize the digital coupon information provided 
to the terminal. 

32. The terminal of claim 30, wherein: 

the usage pattern indicates a viewing history of the 
programming services at the terminal over a specified 
time period. 
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33. The terminal of claim 23, wherein: 

said maintaining means is adapted to establish an initial 
credit balance in response to data received from the 
transmitting end. 

34. The terminal of claim 23, further comprising: 

a user interface for enabling the terminal to redeem said 
credits according to a user input. 

35. The terminal of claim 23, wherein said digital coupon 
information and said programming services are encrypted at 
the transmitting end according to a common cryptographic 
key, further comprising: 

decryption means for decrypting said digital coupon 
information and said programming services. 

36. The terminal of claim 35, further comprising: 
authentication means for cryptographically authenticating 

said digital coupon information. 

37. The terminal of claim 36, wherein: 

said authentication means authenticates said digital cou- 
pon information according to a group key. 

38. The terminal of claim 36, wherein: 

said authentication means authenticates said digital cou- 
pon information according to a public key. 

39. The terminal of claim 23, wherein: 

said programming services include programs which are 
encrypted according to associated program re-keys; 
and 

at least a particular one of said program re-keys is 
transmitted to the terminal from the transmitting end to 
allow the terminal to decrypt and recover the associated 
program using said program re -key; and 

said digital coupon information is transmitted to the 
terminal with said program re-keys. 

40. A data processing method for a terminal in a sub- 
scriber television network, comprising the steps of: 

recovering programming services and digital coupon 
information from a transmitting end of the network via 
a communication channel; 

processing said digital coupon information to determine 
preconditions thereof for enabling the terminal to 
obtain credits when recovering the programming ser- 
vices; and 

maintaining a running credit balance according to credits 
obtained and credits redeemed. 

41. The method of claim 40, wherein: 

said credits are redeemable by a user at the terminal for 
obtaining programming services at a reduced charge. 
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42. The method of claim 40, wherein: 

the preconditions require that the terminal recover par- 
ticular programming services to obtain credits, 

43. The method of claim 40, wherein: 

the preconditions require that the terminal recover a 
specified number of the programming services to obtain 
credits. 

44. The method of claim 40, wherein: 

the preconditions require that the terminal recover the 
programming services for a specified duration to obtain 
credits. 

45. The method of claim 40, wherein: 

the preconditions require that the terminal incur a speci- 
fied amount of charges in recovering the programming 
services to obtain credits. 

46. The method of claim 40, wherein: 

the digital coupon information is customized for the 
terminal. 

47. The method of claim 40, comprising the further step 

f: 

monitoring a usage pattern of the terminal to determine if 
said preconditions have been satisfied; wherein: 
said maintaining step is responsive to said monitoring 
step. 

48. The method of claim 47, comprising the further step 
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communicating data indicative of said usage pattern from 
the terminal to a usage pattern accounting center at the 
transmitting end; wherein: 

said usage pattern data enables the transmitting end to 
customize the digital coupon information provided 
to the terminal. 

49. The method of claim 47, wherein: 

the usage pattern indicates a viewing history of the 
programming services at the terminal over a specified 
time period. 

50. The method of claim 40, comprising the further step 



of: 



establishing an initial credit balance in response to data 

received from the transmitting end. 
51. The method of claim 40, comprising the further step 



of: 



receiving a user input to redeem the credits. 
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